Posts by june@ublog.kimapr.net
 (DIR) Post #B5QG9IzMQSx8HQYUZU by june@ublog.kimapr.net
       0 likes, 0 repeats
       
       if u follow me pls read my bio on my main acc btw i post weird as fuck shit on all my accountshttps://ak.vern.cc/june
       
 (DIR) Post #B60r5X1YzWq2eACscq by june@ublog.kimapr.net
       0 likes, 0 repeats
       
       one thing i really like about systemd is the unit sandboxing capabilities and how convenient it ishttps://wiki.archlinux.org/title/Systemd/Sandboxingheres an example from my tuwunel matrix systemd unit[Unit]Description=Tuwunel Matrix homeserver#Requires=tuwunel.socketWants=network-online.targetAfter=network-online.targetDocumentation=https://tuwunel.chat/[Service]User=tuwunelGroup=tuwunelType=notifyReloadSignal=SIGUSR1WatchdogSec=30TTYPath=/dev/tty25DeviceAllow=char-ttyStandardInput=tty-forceStandardOutput=ttyStandardError=journal+consoleTTYReset=yes# uncomment to allow buffer to be cleared every restartTTYVTDisallocate=noTTYColumns=120TTYRows=40Environment="TUWUNEL_CONFIG=/etc/tuwunel/tuwunel.toml"ExecStart=/usr/sbin/tuwunelReadWritePaths=/var/lib/tuwunel /etc/tuwunelAmbientCapabilities=CapabilityBoundingSet=ManagedOOMPreference=avoidMemoryHigh=3GMemoryMax=4GDevicePolicy=closedLockPersonality=yesMemoryDenyWriteExecute=yesNoNewPrivileges=yes#ProcSubset=pidProtectClock=yesProtectControlGroups=yesProtectHome=yesProtectHostname=yesProtectKernelLogs=yesProtectKernelModules=yesProtectKernelTunables=yesProtectProc=invisibleProtectSystem=strictPrivateDevices=yesPrivateMounts=yesPrivateTmp=yesPrivateUsers=yesPrivateIPC=yesRemoveIPC=yesRestrictAddressFamilies=AF_INET AF_INET6 AF_UNIXRestrictNamespaces=yesRestrictRealtime=yesRestrictSUIDSGID=yesSystemCallArchitectures=nativeSystemCallFilter=@system-service @resourcesSystemCallFilter=~@clock @debug @module @mount @reboot @swap @cpu-emulation @obsolete @timer @chown @setuid @privileged @keyring @ipcSystemCallErrorNumber=EPERM#StateDirectory=tuwunelRuntimeDirectory=tuwunelRuntimeDirectoryMode=0750Restart=on-failureRestartSec=5TimeoutStopSec=2mTimeoutStartSec=2mStartLimitInterval=1mStartLimitBurst=5[Install]WantedBy=multi-user.targetAlias=matrix-tuwunel.servicehow can i replicate that kind of stuff with openrc?
       
 (DIR) Post #B60r5Xnm6HP33glNlw by june@ublog.kimapr.net
       0 likes, 0 repeats
       
       @stilic @navi this doesnt really explain or help anything other than making a blind assumption that bubblewrap can do everything there, and there still isnt an example.
       
 (DIR) Post #B60r5YbP7l6NXbz184 by june@ublog.kimapr.net
       0 likes, 0 repeats
       
       @stilic i dont need to be mansplained either so yeah please go away consang isnt bad either btw <3
       
 (DIR) Post #B60r5YvbudGUYHR9cm by june@ublog.kimapr.net
       0 likes, 0 repeats
       
       @stilic please go away cis man. your queerphobia is Really Showing. a random wiki is not the all mighty source of truth for the entirety of queer folks.so please block me if i seriously upset you that much over our consenting, loving relationship with my sister instead of making yourself look like a fool more and trying to derail my thread here